PERIOD AND INDEX OF GENUS ONE CURVES OVER 
NUMBER FIELDS 



SHARED SHARIF 

Abstract. The period of a curve is the smallest positive degree of Galois- 
invariant divisor classes. The index is the smallest positive degree of rational 
divisors. We construct examples of genus one curves with prescribed period 
and index over certain number fields. 



1. Introduction 

Let X be a nonsingular, projective, geometrically integral curve over a field K. 
Define the index I{X) to be the greatest common divisor of [L : K], where L varies 
over finite algebraic field extensions for which X{L) ^ 0. In particular, if X has a 
rational point over K already, the index is 1. Define the period P{X) of X to be 
smallest positive degree amongst Galois-invariant divisor classes on X. That is, if 
K is an algebraic closure for K, then we consider divisor classes aiv X -.^ X x K 
which are fixed points for the Galois action Gdl{K / K) . We have P{X) \ I{X), for 
the Galois orbit of any x G X{L) yields an invariant divisor class. However, the 
two need not be equal: take the example of a conic without rational points, say 
(the projective curve given by) x'^ + y'^ = —1 over R. Clearly, the index is 2, but 
the class of a single point is Galois invariant. 

In [TD], Lichtenbaum showed that 

Theorem 1.1. For X/K as above, if the genus, period, and index of X are g, P, 
and I respectively, then P \ I \ 2P^ , I \ {2g — 2), and if either (2g — 2)// or P is 
even, then I \ P'^ . 

However, over local fields and Ci fields, the above divisibility conditions are not 
sharp. For example, for genus 1 curves over local fields, the period and index are 
always equal ^lU\. One may then ask what triples {g,P,I) actually occur as the 
genus, period, and index of a curve over a fixed K. Over local fields of characteristic 
not 2, the problem is solved in [TSj. We consider the case g — I and prove the 
following: 

Theorem 1.2. Let K be a number field and E an elliptic curve over K. Let I, n 
be positive integers such that £ \ n. Suppose either that K contains the nth roots 
of unity, or that E has an order n Galois-stable cyclic subgroup. If n is even and 
4 I suppose further that contains the {2n)th roots of unity, or that E has a 
Galois-stable cyclic subgroup of order 2n. Then there exists a genus 1 curve X with 
Jacobian E for which P{X) = n and I{X) = n£. 
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Note that for g = 1, {2g — 2)/I is always even; therefore by Theorem II .11 we have 
I \ P^. For K satisfying the hypotheses of Theorem 11.21 then, we have covered 
every possible period and index for genus 1 curves. 

The significance of period and index lies in computations of Tate-Shafarevich 
and Brauer groups. Grothendieck [7l §4 et seq.] is the canonical source for these 
computations. Gonzalez- Aviles [6] showed that given a (suitably nice) curve X 
over a global field K, under certain hypotheses the finiteness of the Brauer group 
of a model for X is equivalent to the finiteness of the Tate-Shafarevich group of 
the Jacobian of X. The relationship between the sizes of these groups is then 
computable, and depends on the indices and periods of X both over K and over 
the completions of K. Liu, Lorenzini, and Raynaud extended this result ( [111 
Theorem 4.3] and T2]). They showed that for K the function field of a curve over a 
finite field, and assuming that for some prime £ the ^-part of BrX is finite, or that 
the Tate-Shafarevich group of the Jacobian of X is finite, we have Br X is finite 
and has square order. 

Lastly, in a forthcoming paper [4] the author with Pete Clark uses a similar 
result as the one in this paper to show that if E is an elliptic curve over a number 
field K, p is a prime and N any integer, then there exists a p-extension L/K such 
that ^UI{E / L)[p] > N; that is, the order of the p-torsion of the Tate-Shafarevich 
group is unbounded over p-extensions. 

For other results exhibiting curves with various periods and indices, see Cas- 
sels [U, Lang-Tate 0, Stein [20], O'Neil ISJ, and Clark p], [3] and [5]. The 
strongest previous results in this direction are Clark's, who proved that when 
E[p\ C E[K) for p prime, there are principal homogeneous spaces for E with 
period p and index p^ , and that there are curves of every index over every number 
field. 

Recently, Jakob Stix [21, has shown that if X is a curve over Q and there is a 
section for the canonical map 'Ki{X) — > 7ri(Q), then the period and index of X are 
equal. 

2. Preliminary Results 

2.1. Basic properties of period and index. One can alternatively define the 
index to be the smallest positive degree of a divisor on X over K. If cc G X{K)^ the 
Galois orbit of x written as a divisor x) furnishes a rational divisor of positive 
degree. Any prime divisor (of Div not DivAT) is necessarily of this form. This 
shows the equivalence of the two definitions. 

There is also an alternate definition of the period. Choose any x G X{K). The 
cocycle cr t— > '^x — x furnishes a cohomology class in ^ G Y{^{K,J), where J is 
the Jacobian variety of X. Let Picx/x be the connected component of the Picard 
scheme of X representing degree 1 invertible sheaves; it is a principal homogeneous 
space for J — Vic^^j^. As such, there is a class in B^{K, J) representing Picx/^; 
and in fact one sees that this class is ^. Similarly, represents Pic^/x- We 
know that PicJ^^^- is a trivial principal homogeneous space for J precisely when it 
possesses a if-point. Such a point occurs when there is a Galois-invariant element 
of Pic" X. Thus we may define the period as the order of 

Note that when A" is a genus one curve, X itself equals Pic^/j^, and ^ represents 
X as an element of {K, E) , where E is the Jacobian of X . We say a field L splits 
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X if X{L) ^ 0. For X a genus 1 curve represented by ^ e ^^{K, E), L splits X if 
and only if ^ lies in the kernel of the restriction map Y{^{K, E) H^(L, E). 

We now reduce the proof of Theorem ll.2l to the case where n (and hence £) is a 
prime power. 

Lemma 2.1. Let Pi, P2, Ii, and 1 2 be positive integers such that the Pi are relatively 
prime and Pi \ h \ Pi - Let E be an elliptic curve over a field K . If there are genus 
one curves Xi and X2 over K with Jacobian E such that Xi has period Pi and 
index li, then there is also a curve X with Jacobian E having period P1P2 and 
index Ii I2 ■ 

Proof. Let ^i G Y{^{K,E) represent Xi. I claim that ^ := ^1 + ^2 has period P1P2 
and index /1/2. 

Since the period is the order of ^ in 11^{K,E), the first part of the claim is 
obvious. Now suppose that ^ has index /. If L is a finite extension of K which 
splits ^, then ^ lies in the kernel of the restriction map res : H^{K, E) Y{^{L,E). 
Since the orders of the are relatively prime and res is a homomorphism, L splits 
both of the as well. Therefore J1J2 divides I. On the other hand, any field 
which splits both of the splits ^ as well. In particular, we can choose fields of the 
form Li ■ L2 where each Li splits ^i. Varying over all such choices, one sees that 
/ I /1/2. □ 

2.2. O'Neil's obstruction map. Our main tool for computing the index is O'Neil's 
obstruction map. In order to define it, we first construct a theta group. Let E[n\ 
be the n-torsion points of the elliptic curve E, viewed as a group scheme over K . 
Then our theta group is a central extension (n) in the category of group schemes 
over K given by the exact sequence 

(2.1) ^ ^ ^(n) ^ E[n] 0, 

where the commutator is given by the Weil pairing. That is, (n) as a scheme is 
just Gm X E[n], but with multiplication satisfying 

{x,S){y,T){x,Sr\y,T)-' = {e^{S,T),0), 

where e„ is the Weil pairing on E[n] and O is the identity of E; see [TH §23] or [13] 
for more details. Taking (nonabelian) Galois cohomology, one obtains a map 

Ob : }i^{K,E[n]) if{K,G,„i) = BrK. 

This is the obstruction map. Note that it is a quadratic map, not a homomorphism. 
(Quadratic essentially means that Ob(^) — fc(C,^) for some bilinear map b.) This 
results from the fact that ^(n) is a noncommutative group scheme, and hence our 
cohomology sequence takes place in nonabelian Galois cohomology; see Zarhin [52] . 

Recall the Kummer sequence for E gives rise to the exact sequence in Galois 
cohomology 

(2.2) -> E{K)/nE{K) Yi^{K,E[n]) -> Yl^{K,E)[n] ^ 0. 

Thus, if X has period dividing n, there exist (usually many) ^ G ll^{K,E[n]) 

representing it; that is, the image of ^ in \i^{K,E)[n] represents X in the usual 
sense. 

In [IS], O'Ncil showed 



4 



SHAHED SHARIF 



Proposition 2.2. The image of the obstruction map lies in (Bi K)[n\. // Ob(^) 
has order £, then the index of the curve X represented by ^ divides n£. If X has 
index n, then there is a class ^ representing X such that Ob(^) = 0. 

The idea is tliat }1^{K, E[n]) classifies principal homogeneous spaces X for E over 
K along with a choice of Galois-invariant degree n invertible sheaf J^f G (PicX)^, 
up to isomorphism over K . Specifically, any cocycle in the class of ^ gives rise to a 
l?-isomorphism ip : E ^ X. Then ^ = ^{n(p{0)). One sees that T(X,^)/k'' 
forms a twist of P"^^ over K — that is, a Brauer-Severi variety. The obstruction map 
takes the pair (X,^) to the class of this Brauer-Severi variety in Brif . From this 
characterization, the proposition is easy: If X has index n, then there is a rational 
divisor D of degree n. The class ^ representing (X, Jf(i?)) satisfies Ob(f) = 0. If 
Ob(^) has order £ and ^ represents the pair {X, then the Brauer-Severi variety 
arising from ^ is split by an extension of degree £. Then the tensor product is 
a class of degree n£ containing a rational divisor. See [15] for more details. 

One would hope that the converse held: if X has index n£, then there ought to 
be ^ representing X such that Ob(^) has order £. However, this is not known to 
be true. We will use a trick in proving the main theorem to construct X for which 
this does hold. 

Let 6 be the composition E{K) E{K)/nE{K) -> }i^{K,E[n\), where the lat- 
ter map is given by the map in (|2.2p . For x G E{K) and X a principal homogeneous 
space for E over K, let T{x, X) denote the Tate pairing of X with the image of x 
in E{K)/nE{K). Then 

Proposition 2.3. Ob(^ + 5x) = Ob(^) + T{x, X). 

Proof. See [ISl §5]. □ 

O 'Neil's introduction of the obstruction map is useful because in many cases 
it may be computed using a Hilbert symbol, which we now define. Let K he a, 
field of characteristic not dividing n which contains the nth roots of unity. Let 
a,6 e iiT^/if^". By Kummer theory, we know that K"" / K'''' = H\i\:,^„). The 
cup product gives a map 

Fix a primitive nth root of unity C,. Define an isomorphism pin ® l^n fJ-n by 
(g) 1— > (^*-', which induces an isomorphism H^(i^, fin® IJ^n) — > ^{K, f-n)- Using 
the fact that H^(if, fJ-n) — (Brif )[n], we see that the composition gives a pairing 

K^'/K"'' X K"" IK'''' (Bri^)[n] 

(a, 5) {a,b) 

which we call the Hilbert symbol. If we let w — (a, 5), then we will alternatively 
write (w) for (a, b). Since the cup product is bilinear and skew-symmetric, so is the 
Hilbert symbol. 

Note that the Hilbert symbol depends on n and Frequently we will abuse 
notation and define the Hilbert symbol as a map (K^)'^ BrK, by composing 
with the obvious quotient map. 

We return to the obstruction map. Assume that the n-torsion of E is rational 
over K. By the theory of the Weil pairing, /i„ C K. Let C, be the previously chosen 
primitive nth root of unity. Fix a basis {S,T) for E[n] such that e{S,T) = 
where e is the Weil pairing.. The choice of basis, and our fixed generator ( of /i„, 
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yields an isomorphism of (trivial) Galois-modules E[n\ = /i„ x /i„, and we have an 
isomorphism 

K : }i\K,E[n]) i^^/X^" x if^/if^". 

Proposition 2.4. Let £, e R\K,E[n]). Ifn is odd or E[2n] C E{K), thenOh{Cl = 
{n{{)). Ifn is even, then 2 Ob(0 = 2(k(^)). 

Proof. For the case that n is odd, see [TSJ Prop. 3.4] and [TB]. A proof in the 
even case, including an explicit computation of Ob(^) — can be found in [H 

§2]. □ 

Assume from now on that if is a number field. If w is a place of K, write Ky 
for the completion of K a.t v. In order to use the Hilbert symbol, we will reduce to 
the local case using the fact that, if if is a global field, Br A' = (By Bt Ky. That is, 
in order to compute (a, b), it suffices to compute (a, b)y, where the latter symbol is 
computed in Ky, and a, b are considered as elements of Ky. 

(More generally, for any X-group scheme M and integer q, we have a natural 
localization map 

W{K,M) R'^{Ky,M) 
in etale cohomology. We will denote this map by adding the subscript v; e.g. 

If D is a place of K , we also use v to denote a fixed corresponding valuation. 

Lemma 2.5. Let Ky be a nonarchimedean local field such that v{n) — 0. Let n be 
a uniformizing parameter and u,u' units; that is, v{u) — v{u') — 0. Let ¥ be the 
residue field of Ky . 

(1) {u,u')y^O. 

(2) The order of {u,Tr)y equals the order of the image of u in F^/F^". 

Proof. According to [T71 Ch. XIV], (a, b)y = if and only if is a norm from the 
extension Kyiji^/'^) / Ky. The extension Ky{u^/^'^) is unramified with degree, say, d, 
which by Hensel's Lemma also equals the order of u in F^ /F^". According to local 
class field theory, the norm from an unramified extension of degree d is precisely 
the set of elements x such that v{x) is a multiple of dv{'K). The result follows 
immediately for the first claim, and from bilinearity for the second claim. □ 

We also have the following: 
Proposition 2.6. For a,b e K^ , X!^"' ^ ^^ 

Here, we use the fact that Bi Ky is canonically isomorphic to Q/Z, ^Z/Z, or 
via the invariant map so that the sum makes sense. For the remainder of this 
paper, we identify Br Ky with the appropriate subgroup of Q/Z. Note that the sum 
is finite: there are finitely many archimedean primes, and for all but finitely many 
nonarchimedean v, v{a) — v{b) — v{n) = 0, so that by Lemma 12.51 (a, b)y — 0. 

Proof. This follows from the fact that Br K is isomorphic to the set of (ty), ty G 
BiKy, such that almost all ty ~ and J2^v = 0; and the fact that cup products, 
and hence the Hilbert symbol, commute with localization. □ 

In order to deal with the fact that the obstruction map does not necessarily give 
a sharp bound on index, we will use obstruction maps of different levels. We define 
Ob„ to be the corresponding obstruction map H^(i4r, E[n]) -^Bi K. 
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Proposition 2.7. Let n and m be positive integers. The following diagrams com- 
mute: 



(1) 



Ob„ 



BiK 



(2) 



where is induced by the canonical inclusion j : _E[n] — > E[mn\, and m is 
muliplication by m. 



R\K,E[n] 



Ob„ 



BiK 



Ob„ 



BtK 



(3) 



where [m] is the map induced by the multiplication by m map E[mn] 
E[n]. 



il\K,E[n]) 



ii\L,E[n]) 



Ob„ 



BtK 



Ob„ 



■BtL 



where L/ K is a field extension and res is the restriction map. 

Proof. Let ^ G Y{^[K^E[n]) represent the pair (X, where ^ is the divisor 
class of n{x) for some x £ X{K). Then represents (X,^™). The map 

which takes elements of (PicX)*^ to the class of the associated Brauer-Severi 
variety is a homomorphism; indeed, it arises from the Leray spectral sequence 
HP(i4:,H«(X,(E„)) ^ HP+«(X,(G„), which yields the exact sequence 

^ PicX ^ H°(X,PicX) ^ ll^{K,G,„i). 

The last map sends an invertible sheaf to the class of its associated Brauer-Severi 
variety; see for example [9j. The first part of the proposition follows. 

For the second part, Mumford showed [131 P- 309-310] that multiplication by m 
extends to a homomorphism on theta groups '^[mn) — > '^(n). The restriction of 
this homomorphism to Gm is also multiplication by m. Taking the long cohomology 
sequence associated to (|2.ip . we obtain the commutative diagram. 

The third part is obvious, since res^ represents the same pair (X,^) as ^ does, 
but over L. □ 



Similar to Ob„, we define 5n to be the composition E(K) E{K)/nE{K) 
H {K,E[n]), where the second map in the composition is the coboundary coming 
from the Kummer sequence for E. 
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3. The case of rational torsion 

By Lemma 12.11 we may assume that n is a prime power p^; this assumption 
holds for the remainder of the paper. In this section, we will prove the theorem 
under the additional assumption that E[n\ C E{K) in the case that p is odd, and 
E[2n] C E(K) ifp^ 2. 

3.1. Choosing a pair of primes. Our first step is to find a pair of distinct nonar- 
chimedean primes w, v' satisfying certain splitting conditions. (We use primes and 
places interchangeably.) We state the conditions below, after which we show that 
infinitely many pairs v, v' satisfying the conditions exist. The proof is essentially 
repeated use of the Cebotarev density theorem. Let S be the union of the primes w 
of K such that E has bad reduction at w, archimedean primes, and primes dividing 
n. The conditions are 

Al. The primes are principal with totally positive generators tt and tt' 
respectively. 

A2. Let E{K) embed in E{Ky) in the usual manner. Then E{K) lies in nE{Ky). 

A3. For each w & S,tt and tt' lie in K^^. 

A4. The order of the image of tt' in / K^"^ is exactly n. 

Lemma 3.1. There exist infinitely many pairs of distinct primes v, v' satisfying 
conditions Al-AJ^. 

Proof. Condition Al is equivalent to v and v' splitting completely in the Hilbert 
class field of K. 

Condition A2 is the same as requiring v to split completely in K{[n]~'^E{K))] 
that is, the field obtained by adjoining to K aW x ^ E{K) such that [n]x G E{K). 
By [19^ p. 194], K{[n]^'^E{K)) is a finite abelian extension which is unramified 
outside S. 

Let m be the modulus given by the product of and all primes where E has bad 
reduction. Let Km be the ray class field for K with modulus m. Then condition 
A3 holds if V and v' split completely in A'^; for in that case, the Frobenius for v 
(say) is trivial and, by class field theory, v has a generator tt which is congruent to 
1 (mod m). Then Hensel's Lemma implies A3. 

We now choose v to be any prime which splits completely in the compositum of 
the three fields named above. Next we tackle A4. 

By abuse of notation, let d be a valuation corresponding to the prime v. Let 
a ^ K he any element such that ^(a) = and whose image in /A'^" has order 
n; since tt = 1 (mod m), and n \ m, there exists such a in K.^. But K is dense in 
Ky, so we may find such a in K. Let F' be the ray class field with modulus v. 
By class field theory, the Galois group Gal(F'/Ar) is isomorphic to the class group 
with modulus v. In particular, if v' and {a) lie in the same class in this class group, 
then v' has a generator tt' which is congruent to a (mod v), and hence satisfies A4. 

Let F be the compositum of and K{[n]^^E{K)). We see that F' is unram- 
ified outside while F is unramified at v. Hence F O F' lies in the Hilbert class 
field of K. To satisfy A1-A3, we wish v' to split completely in F, while to satisfy 
A4, we wish v' to lie in the class of (a) in the appropriate ray class group. These 
conditions are compatible since they both imply that v' splits completely in the 
Hilbert class field of K. Thus we may apply the Cebotarev density theorem to find 
infinitely many such v' and tt'. □ 
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3.2. Construction of curve. As mentioned earlier, a choice of ordered basis {S, T) 
for E[n] with e{S,T) — ^ yields an isomorphism 

K : R\K,E[n]) X^/X^" x if^/if^". 

Choose ^ S }i^{K,E[n]) such that k(^) = (tTjTt'"/^). Let X be the corresponding 
principal homogeneous space for E. 

Proposition 3.2. The curve X has period n and index ni. 

Proof. For any positive integer to, we have nijnS,) = (tt™, tt'™"/^). Let v be the 
place of K lying over (tt), and suppose m < n. If the curve associated to to^ 
is a trivial principal homogeneous space, then there exists x G E{K) such that 
k{5x + m^) ~ (1, 1), where we recall that 5 is the composition 

E{K) E{K)/nE{K) ^ Yl^{K,E[n]). 

But by condition A2, x lies in nE{Ky). Hence {6x)v = 0. Therefore for any choice 
of x, K{5x + m£^)v = (tt™, • ), and so to^ yields a trivial principal homogeneous space 
if and only if n | to. Therefore the period of X is n. 

By Proposition 12.41 Ob(^) — (tt, tt'"/^). We compute the Hilbert symbol locally. 
For places w satisfying w{n) > 0, condition A3 shows that 

(7r,^'«/0„ = 0. 

Let v' be the place corresponding to tt'. For w ^ v,v' and w{n) — 0, n and tt' 
are both units in K^^, and so by Lemma 12.51 the local Hilbert symbol is zero. By 
Proposition l2.61 the order of the Hilbert symbol at v equals that at v' , so we need 
only consider v. Combining condition A4 with Lemma [2.5[ we see that (tTjTt'"/^} 
has order £. Hence Ob(^) has order £, and the index of X divides n£. 
Let £' strictly divide £, and let j* be the canonical map 

R^{K,E[n]) '^ll^{K,E[n£']). 

If X had index n£', then by Lemma [2T2l there would exist a; in E{K) such that 

Ohnv{5nl'X+ = 0. 

According to Proposition [2?3l the above equals 

0Kt{3.m+T{x,X). 

By condition A2, x € nE{Ky) and hence T{x,X)y ~ 0. But by Proposition 12. 7[ 
Ohnt j*(0 = ^' Ob„ ^ 7^ if ^' < ^. Therefore the index of X is precisely n£. □ 

4. Proof of Main Theorem, odd n 

For now, we assume n is odd. We suppose either: a) ^„ C iiT, or b) i? contains a 
Galois-stable subgroup of order n. Over L := K{E[n]), we may use the arguments 
of the previous section to construct a cohomology class ^ G H^(L,iJ[n]) with the 
desired properties. Let cores be the corestriction map 

cores : Yl^{L,E[n]) Yi^{K,E[n]). 

We will show that cores ^ represents a curve over K with period n and index n£. In 
order to compute the index, we will need to base extend back to L; in other words, 
we'll compute res o cores ^, where res is the restriction map 

res : Yl^{K,E[n\) Yi^{L,E[n\). 



PERIOD AND INDEX OF GENUS ONE CURVES OVER NUMBER FIELDS 



9 



4.1. Pairs of primes. As in the previous seetion, we wish to choose principal 
primes of L, (tt) and (tt'), such that analogues to conditions A1-A4 hold, along 
with a new condition. For any place w of L, let wk denote the place of K lying 
below w. Let S be the set of primes w of L such that E has bad reduction at wk, 
Wk is archimedean, or WK{n) > 0. 

We now state the relevant conditions. 

Bl. The primes v = (tt) and v' = (tt') are principal, with totally positive 

generators tt and tt'. 
B2. Under the usual embedding, E{K) lies in nE{Kyj^). 
B3. The generators tt and tt' lie in L^" for all w G S. 

B4. The order of the image of tt' in / L^"- is n. Additionally, cttt' lies in L^" 

for all nontrivial a S Ga\{L/K). 
B5. The primes vktv'^^ split completely in L. 

Lemma 4.1. There are infinitely many pairs of primes {tt), [tt') satisfying condi- 
tions B1-B5. 

Proof. Let m be the modulus over L given as the product of and all primes 
w in S. Let be the ray class field of L with modulus m. The modulus m is 
rational over K , so that Lm is Galois over K. Let F be the compositum of Lm, 
K {[ri\~'^ E{K)) , and the Hilbert class field of K . By the Cebotarev density theorem, 
there exists infinitely many primes vk of K which split completely in F. Setting v 
equal to any prime of L lying over vk, we use the same reasoning as in Lemma l3. II 
to see that v satisfies conditions B1-B5. 

Choose any unit (3 in L„ which has order n in /^u By the Chinese Remain- 
der Theorem, there exists a € L such that 

a = f3 (mod v) 
(4.1) a EE 1 (mod av) ^ 1 e Gal{L/K) 

Let F' be the ray class field for L with modulus 11 The modulus is rational 
over K, so that F' is Galois over K. The Galois group Gal(i^'/L) is isomorphic 
to the class group with modulus Y\ av via the Artin reciprocity map. Let in 
Gal(-F"/i) map to the class of (a) under this isomorphism. Then under the inclusion 
Gal(F'/i) ^ G'aI{F' /K), jl maps to, say, 7. Let [7] be the conjugacy class of 7 
in Ga\{F'/K). 

One can find r e Ga,l{F'F/K) such that T\pi lies in [7], and t\f is trivial. This 
follows because F' /L is ramified only at the av, while F/L is unramified at those 
places; therefore F D F' is contained in the Hilbert class field of L. But 7 acts 
trivially on the Hilbert class field since (a) is principal. Therefore, r as prescribed 
exists. 

Now we apply the Cebotarev density theorem again to find v'j^ corresponding to 
the conjugacy class of r. Choosing v' to be any place of L lying over u^, we use 
the same reasoning as before to conclude that v' satisfies the conditions. □ 

4.2. The corestriction map. As before, choose a basis (5, T) for E[n] such that 
e{S, T) = (. If we are under the hypothesis that E contains a Galois-stable order 
n subgroup, choose our basis so that S generates this subgroup. As before, our 
choice of basis yields an isomorphism 

K:Il\L,E[n]) ^ L^'/L'^' x L^'/L''" 
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Let tTjTt' be as in the previous section, and choose ^ so that k(^) = {tt,tt'). Let 
cores : ll^{L, E[n]) ll^{K,E[n]) be the corestriction map, and rj = cores(^). 
We wish to show that the curve corresponding to 77 satisfies the conditions of our 
theorem. But it is too diSicuh to compute the obstruction map Ob (77), so we will 
instead use Ob(res77), where res is the restriction map 

ll^{K,E[n]) ll\L,E[n]). 

Therefore, we need to compute res o cores(^). Note that cores ores is well-known 
and equal to [L : K], but the same is not true of res o cores. 

For any G^f -module M and nonnegative integer r, one has an action of Ga\{L/K) 
on H''(L, M). This action is induced by the action on homogeneous r-cochains 

c'^iH, ■ • ■ ,7r) = crc(cr~^7icr, . . . , cr"^7rCr) 

where a € Ga\{L/K) and 7^ G Gl- (Actually, we must lift a to any fixed element 
of Gk when acting by conjugation on the 7j.) Define Nm : H'^(L, M) H''(L, M) 

by 

Nm(6i) = Yj 

a£Gal(L/K) 

Lemma 4.2. For 9 G H'"(i,M), resocores6' — Nmd, where res and cores are the 
obvious restriction and corestriction maps. 

Proof. This follows from the definition of corestriction and dimension shifting; 
see [HI p. 119]. □ 

Therefore cores 77 = Nm^. Unfortunately, k is not Gal(L/fsr)-equivariant, so that 
K(Nm^) 7^ (NmTT, NmTr'). Instead, we have a twisted norm on L'^ / L^"^ x /L^^, 
which we now describe. Let 

Gb1{L/K) GL2(Z/nZ) 

be the representation of Gal{L/K) on E[n] with respect to the basis {S,T). The 
determinant of M^- is given by the nth cyclotomic character. If /i„ C K, then 
the determinant is identically 1, and hence the representation lies in SL2(Z/nZ). 
If S generates a Galois-stable subgroup, then the representation lies in the set of 
upper-triangular matrices. 

Proposition 4.3. Suppose g G Gal(L/i^), i G Y(^{L,E\n}^ and k(^) = (a, b). 
Then 



where for M G GL2(Z/nZ), if 

M 

then M{a,b) = {a'V,a^U). 



« ] 
k I 



Proof. Let p : E[n\ Hn x IJ'n be the isomorphism given by the basis (5, T). Write 
X /in)p for the Gal(L/iir)-module with underlying group x pn, but with 
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module-structure making p an isomorphism of Galois modules; that is 

ct(Ci,C2)p = PCrp"^(Cl,C2) 
= M,(Cl,C2). 

Consider the diagram 

(4.2) L''|L'''-xL''/L'<^^^n\L,^l,,x^l,,) 

Hi(L, X /.„)p) U\L, E[n]) 

The isomorphism ij: comes from the usual Kummer isomorphism. The map is 
induced by the canonical isomorphism of the underlying groups i : x /i„ — > 
X /i„)p. The map ip is induced by the map sending (C, 1) to S and (1,C) to 
T (compare to k~^). Then the horizontal arrows are both Gal(L/_?C)-equivariant, 
and the composition ipi^^ij) is equal to k^^. 

Let 7 G Gal(L/L) and lift a arbitrarily to an element, also written cr, of 
GaX(K/K). We have 

(4.3) [i.Ma, 6)]"(7) = (J^Wa, b){a-'ja)) 



(4.4) = ai{(T ^ cFip{a,b){a ^^cf)) 

(4.5) =az(a-V(a,6)"(7)) 

(4.6) ^ ai{a-^[ij{(ja,ab){-^)]) 

(4.7) 

(4.8) =-Hdil^^^"''^'0^^^- 



The equality (|4.5p follows by the definition of the Gal(L/if )-action on H^(L,/i„ x 
p,n). Since V' is a Gal(L/i4r)-morphism, we obtain (|4.6p . Finally, (|4.7p follows from 
the action of cr on E[n] by the matrix M^-, and the action of on /i„ x /i„ by 
(detM,,)-!. 

Now apply ip to both sides of the equation to obtain 

[.-(M)]^^.-(-^(.a,.6)) 
from which the lemma follows. □ 
Corollary 4.4. Let k(^) = {a,b). Then ^(Nm^) equals 

(Jl (det ) - Va*(" ]^ (det Af^ ) - Va''^(" ) 

where the product is taken over a G Gal(L/A'). 

4.3. Computation of the obstruction map. Let ^ S ii^{L,E[n]) satisfy k(^) = 
(7r,7r'"/^), where tt and tt' were chosen as in Lemma l4. II Let rj = cores ^. In order 
to compute Ob(r7), we instead compute resOb(r7) = Ob(resry), or Ob(Nm^). But 
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the n-torsion E[n] is rational over L, so by Proposition 12.41 we may use the Hilbert 
symbol to compute Ob(Nm^). Let 

c = ]J(dctM^)-V7r'('") 

(i = ]J(detAf„)-V7r'=('') 

c' = ]J(dctAf^)-V7r'TJ'('^) 

d' = ]J(dctA/^)-V7r'7'W. 

Thus, NmK-i(7r,l) = K-^ic,d), NmK-i(l, tt'"/^) = K-^{c',d'), and ^(NmO = 
(cc', dd'). We wish to compute the Hilbert symbol (cc', dd'). 

Lemma 4.5. Let w be any place of L satisfying w{'K'it') ~ 0. Then the local Hilbert 
symbol {cc', dd')w is trivial 

Proof. If w is non-archimedean and win) = 0, then cc' and dd' are both units in 
Lw- Therefore by Lemma [231 the Hilbert symbol is trivial. 

If win) ^ 0, then w lies in S. According to condition B3, tt, tt' and their 
conjugates lie in L^". Again, the Hilbert symbol is trivial. 

Lastly, since n is an odd prime power and fin <Z L, L has no real embeddings. 
Therefore the Hilbert symbol at all the archimedean places is automatically trivial. 

□ 

Lemma 4.6. Let v be the place of L corresponding to tt. Then {cc' , dd') v has exact 
order £. 

Proof. By bilinearity, we have 

(cc', dd') = (c, d) + (c, d') + (c', d) + {d, d'). 

Since c' , d, d' are all units in , the last two terms are zero by Lemma 12.51 Now 
c — MTT, where u is some unit in L^, so that {c,d')y = (tt, d')„. By condition B4, 
d' = tt'"/^ (mod i^"), so that {c,d')v = (tt, 7r'"/^)i,. Again applying condition B4 
and Lemma 1^751 we see that (c, d')^ has order £. 

We now show that (c, d)^ = 0. One sees that it suffices to show that (tt, d)^ — 0. 

Recall that {S,T) was our chosen basis for E[n]. If the subgroup generated by 
S is Galois-stable over K, then the are all upper triangular. In particular, 
k{a) = for all tr G Gal{L / K) , which implies that d = 1. Therefore (tt, d)„ = 0. 

Let us assume instead that fi„ C K. This immediately implies that det M^- = 1. 
Since n is odd, it suffices to show that 2{Tr, d)y = 0. By expanding out d and using 
bilinearity, we may instead show that 

[TT,aTr ^ ') — — ^TT, (T TT ^ ')y. 

Recall that we write M„ by 

But M„-\ = M^^. Using det Afo- = 1, we obtain 

AC' = 



i{a) j{a) 
k{a) l{a) 



-k{a) i{a) 
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In other words, k{a ^) — —k{a). Therefore it suffices to show that {TT,aTT)y = 
{Tr,a^^Tr)y. But we have 

= -(tt, (T 

= (tt, a^^Tr)y. 

The last equahty follows from Proposition l2. Gl and the fact that the symbol (tt, a^^ir) 
is trivial everywhere but at v and a~^v. This proves the lemma. □ 

Let v' be the place of L corresponding to tt'. 

Proposition 4.7. Ob rj has order £ at vk and v'j^, and is trivial at all other places. 

Proof. First we prove triviality. For any place wk of K, the corestriction map on 
il^{L,E[n]) induces a homomorphism 

©cores^ : ® H^(i„, £;[n]) R^{K^j^,E[n]) 

where the sum is over all places w oi L lying over wk- Recall that 77 = cores ^. By 
construction, f is locally trivial everywhere except at w, v' , and their conjugates. 
Triviality at wk 7^ vk, v'j^ follows. 

Since the local invariants of a global Brauer class sum to zero, it suffices to show 
that (Ob 7?)^^ has order £. The diagram 



>R\Ly,E[n])' 



BtK 



Br K„ 



) Br L„ 



commutes. The horizontal maps are the relevant obstruction maps. Commutativity 
follows from functoriality of localization and restriction in nonabelian cohomology. 
But Vk splits completely in L by condition B5, so that Ky^^ = Ly. Thus if we 
consider the restriction map onto a single factor 



R\Ky^,E[n]) ^BrKy^ 



W{Ly,E[n]) ^BrL„ 

then the vertical maps are isomorphism. Therefore the order of {Oh ri)yj^ equals 
the order of (Obres?7)„, or rather (ObNm^)„. 

Since E[n] C E{L) C E{Ly), we may use the Hilbert symbol to evaluate the 
obstruction map. By construction, K(Nm^) = {cc',dd'). The result follows from 
Lemma 14.61 □ 
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4.4. End of proof. Let X be the genus 1 curve over K represented by the class 
•q in H^(A', Clearly the period of X divides n. Suppose that the period is 
smaller. Then there is some positive integer m with m < n and some x e E{K) 
such that 

Sx + mr/ = 0. 

In particular, this holds locally at vk- But by condition B2, Sx is trivial at vk for 
all x £ E{K). Therefore we must have mrj = at vk- In particular, this must hold 
when we restrict to Ly. But this cannot be, for 

K(reSi/7f mr/) = mK{Tesr/) 

= m{ui ■ TT, U2) 

for some ui, U2 which are units in Ly. We conclude that X has exact period n. 

By Proposition |4?7l Ob 77 has order £. Applying Proposition l2.2[ we see that the 
index of X divides ti£. Suppose the index is n£' , with £' < £. By Proposition 12.21 
there is a class rj' in {K , E[n£']) representing X such that Ob„f/ 77' = 0. Let j, 
be the canonical homomorphism 

ll\K,E[n]) ll^{K,E[ne']). 

Since also represents X, there exists x e E{K) such that 

v' = 3*{'n) + ^x. 

By Proposition [2?3l 

OKe' v' ^OKe'Mv)+T{x,X) 
where T is the Tate pairing. Consider the latter equation locally at vk- By condi- 
tion B2, x lies in nE{Ky^), so the Tate pairing is zero. The left hand term is zero 
by hypothesis. But by Proposition 12. 7i Ob„^' j*{v) — ^' C)t)„ 77, and the latter is not 
zero since Ob„ r\ has order £ and £' < £. This yields a contradiction. Therefore the 
index of X must be exactly n£. 

5. Even period 

Assume now that ?i is a power of 2. Three problems now arise in the previous 
arguments. 

The first problem is that the obstruction map need not equal the Hilbert symbol; 
instead, according to Proposition 12.41 Ob(^) — is killed by 2. The second 

problem is that in the proof of Lemma [4.51 {cc',dd')w need not be trivial at real 
w; but in any case 2(cc', dd')^ = 0. Finally, in our proof of Lemma 14.61 we showed 
that (tt, d)y — when /i„ <Z K hy instead showing that 2(7r, d)^ = 0; if rt is even, of 
course, this is insufficient. 

Suppose we undertake our construction anyway, yielding 77 S }l^{K^E[n]). The 
three problems above imply that our calculation of Ob(77) may be off by an element 
of (Br if) [2]. If £ > 4, then the difference is immaterial, and the proof works. We 
now consider the cases £ = 1 and £ = 2. 

Assume that £ = 1. According to our main theorem, we are under the weakened 
hypothesis that either /i2„ C K or E contains a Galois-stable cyclic subgroup of 
order 2n. Using the construction from the previous section, we can come up with 
a curve X' with period 27T. and index either 2n or 477, though we are not able to 
determine which of the two holds. Suppose t] G R^{K, E[2n]) represents X' with 
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Ob2n(?7) G (Briir)[2]. Let X be the curve with class 2rj. Note that we may view 
2ri as an element of Yl^ {K , E[n]); in particular, X has period n. To show that 
X has index n, it suffices to show that Ob„(2?7) = 0. But by Proposition 12.71 
Ob„(277) =2Ob2„r, = 0. 

The procedure for ^ = 2 is similar: construct X' as before with period 2n and 
index 8n, so that Ob2„(?7) has order 4. Then Ob„(2r7) has order 2, and the curve 
X represented by 2ri has period n and index 2n. 

6. Final remarks 

The hypothesis on the main theorem amounts to a statement about the Galois 
representation on E[n]. The hypothesis is needed at precisely one place: the calcu- 
lation of (tt, d)v appearing in the proof of Lemma l4!6] Recall that d is a product of 
the conjugates of tt, each appearing with some multiplicity. If one could, for exam- 
ple, choose TT so that (tt, cttt) = for all a, then one could generalize the theorem 
to arbitrary number fields. 

One can get around this to some extent, at least when we wish the index to be 
maximal (/ = P^); see [J, which deals with this case over arbitrary number fields. 

The results of the paper should generalize to function fields, that is, finite exten- 
sions of Fp(T). The only wrinkle occurs when p \ n, for then E[n\ is no longer an 
etale group scheme. Clark, in a personal communication, has results making use of 
a so-called flat Hilbert symbol. One suspects that, with greater care, the results of 
this paper can be duplicated using the flat symbol. 

Lastly, the description of the Gal{L/K) action on ll^{L,E[n]) yields an explicit 
description, in most cases, of H^{K,E[n]) for K an arbitrary number field, in the 
following manner. Given E / K, for n not divisible by a finite set of primes, we know 
that Ga\{L/K) surjects onto AMt{E[n]). One can show that W{L/K, E[n]) = for 
all g, whence the inflation-restriction sequence yields an isomorphism 

'R\K,E[n])^ll^{L,E[n])^''^^^''^\ 

From Proposition 14.31 one obtains the desired description of H^(i\r, as pairs 

of elements of i^/L^". 
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